BSCS Computer Security and Cybersecurity 3

Question 1

What is Cross-Site Scripting (XSS)?

Accepted Answer

An attack where malicious client-side scripts are injected into web pages viewed by other users

Answer

XSS attacks inject malicious scripts into web pages that execute in other users' browsers, enabling theft of cookies, session tokens, or sensitive data.

Question 2

What does the principle of least privilege state?

Accepted Answer

Users should be granted only the minimum access rights necessary to perform their assigned job functions

Answer

The principle of least privilege limits user and process permissions to the bare minimum required, reducing the potential damage from errors, insider threats, or compromised accounts.

Question 3

Which of the following is a valid example of true two-factor authentication (2FA)?

Accepted Answer

Using a password (something you know) combined with a fingerprint scan (something you are)

Answer

True 2FA requires credentials from two distinct factor categories: something you know (password), something you have (token), or something you are (biometric) — two passwords are still only one factor type.

Question 4

What is the role of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

Accepted Answer

A trusted third party that issues, signs, and manages digital certificates to vouch for identity

Answer

A Certificate Authority is a trusted entity that digitally signs certificates binding public keys to verified identities, forming the trust anchor for PKI-based authentication.

Question 5

Which attack exploits human psychology rather than technical vulnerabilities to gain unauthorized access to systems or information?

Accepted Answer

Social engineering

Answer

Social engineering manipulates people through deception, pretexting, or phishing to divulge credentials or perform actions that bypass even technically strong security controls.

BSCS - Bachelor of Science in Computer Science Practice Test

BSCS - Bachelor of Science in Computer Science Practice Test

BSCS Computer Security and Cybersecurity 3